The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1304 advisory.

  - kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion (CVE-2022-0480)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1303 advisory.

  - kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion (CVE-2022-0480)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2394 advisory.

  - kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)

  - kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion (CVE-2022-0480)

  - kernel: vmwgfx: NULL pointer dereference in vmw_cmd_dx_define_query (CVE-2022-38096)

  - kernel: integer overflow in l2cap_config_req() in net/bluetooth/l2cap_core.c (CVE-2022-45934)

  - kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race (CVE-2023-3567)

  - kernel: cxgb4: use-after-free in ch_flower_stats_cb() (CVE-2023-4133)

  - kernel: netfilter: nf_tables: out-of-bounds access in nf_tables_newtable() (CVE-2023-6040)

  - kernel: NVMe: info leak due to out-of-bounds read in nvmet_ctrl_find_get (CVE-2023-6121)

  - kernel: local dos vulnerability in scatterwalk_copychunks (CVE-2023-6176)

  - kernel: GC's deletion of an SKB races with unix_stream_read_generic()  leading to UAF (CVE-2023-6531)

  - kernel: GSM multiplexing race condition leads to privilege escalation (CVE-2023-6546)

  - kernel: null pointer dereference vulnerability in nft_dynset_init() (CVE-2023-6622)

  - kernel: Null Pointer Dereference vulnerability in ida_free in lib/idr.c (CVE-2023-6915)

  - kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size     (CVE-2023-6931)

  - kernel: use-after-free in IPv4 IGMP (CVE-2023-6932)

  - kernel: Bluetooth Forward and Future Secrecy Attacks and Defenses (CVE-2023-24023)

  - kernel: irdma: Improper access control (CVE-2023-25775)

  - Kernel: double free in hci_conn_cleanup of the bluetooth subsystem (CVE-2023-28464)

  - kernel: Bluetooth: HCI: global out-of-bounds access in net/bluetooth/hci_sync.c (CVE-2023-28866)

  - kernel: race condition between HCIUARTSETPROTO and HCIUARTGETPROTO in hci_uart_tty_ioctl (CVE-2023-31083)

  - kernel: usb: out-of-bounds read in read_descriptors (CVE-2023-37453)

  - kernel: netfilter: nftables out-of-bounds read in nf_osf_match_one() (CVE-2023-39189)

  - kernel: netfilter: xtables sctp out-of-bounds read in match_flags() (CVE-2023-39193)

  - kernel: xfrm: out-of-bounds read in __xfrm_state_filter_match() (CVE-2023-39194)

  - kernel: QXL: race condition leading to use-after-free in qxl_mode_dumb_create() (CVE-2023-39198)

  - kernel: ipv4: NULL pointer dereference in ipv4_send_dest_unreach() (CVE-2023-42754)

  - kernel: netfilter: race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP (CVE-2023-42756)

  - kernel: lib/kobject.c vulnerable to fill_kobj_path out-of-bounds write (CVE-2023-45863)

  - kernel: NULL pointer dereference vulnerability in io_uring_show_fdinfo (CVE-2023-46862)

  - kernel: use-after-free during a race condition between a nonblocking atomic commit and a driver unload in     drivers/gpu/drm/drm_atomic.c (CVE-2023-51043)

  - kernel: bluetooth: bt_sock_ioctl race condition leads to use-after-free in bt_sock_recvmsg     (CVE-2023-51779)

  - kernel: use-after-free in net/atm/ioctl.c (CVE-2023-51780)

  - kernel: smb: client: fix potential OOBs in smb2_parse_contexts() (CVE-2023-52434)

  - kernel: gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (CVE-2023-52448)

  - kernel: perf/x86/lbr: Filter vsyscall addresses (CVE-2023-52476)

  - kernel: mm/sparsemem: fix race in accessing memory_section->usage (CVE-2023-52489)

  - kernel: net: fix possible store tearing in neigh_periodic_work() (CVE-2023-52522)

  - kernel: HID: sony: Fix a potential memory leak in sony_probe() (CVE-2023-52529)

  - kernel: team: NULL pointer dereference when team device type is changed (CVE-2023-52574)

  - kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)

  - kernel: net/core: kernel crash in ETH_P_1588 flow dissector (CVE-2023-52580)

  - kernel: netfilter: nf_tables: memory leak when more than 255 elements expired (CVE-2023-52581)

  - kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)

  - kernel: netfilter: nf_tables: disallow timeout for anonymous sets (CVE-2023-52620)

  - kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in     function receive_encrypted_standard of client (CVE-2024-0565)

  - kernel: hugetlbfs: Null pointer dereference in hugetlbfs_fill_super function (CVE-2024-0841)

  - kernel: nf_tables: use-after-free vulnerability in the nft_setelem_catchall_deactivate() function     (CVE-2024-1085)

  - kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function (CVE-2024-1086)

  - kernel: tls: use-after-free with partial reads and async decrypt (CVE-2024-26582)

  - kernel: tls: race between async notify and socket close (CVE-2024-26583)

  - kernel: tls: handle backlogging of crypto requests (CVE-2024-26584)

  - kernel: tls: race between tx work scheduling and socket close (CVE-2024-26585)

  - kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption (CVE-2024-26586)

  - kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)

  - kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier (CVE-2024-26602)

  - kernel: netfilter: nf_tables: reject QUEUE/DROP verdict parameters (CVE-2024-26609)

  - kernel: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (CVE-2024-26633)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1250 advisory.

  - kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion (CVE-2022-0480)

  - kernel: nfp: use-after-free in area_cache_get() (CVE-2022-3545)

  - kernel: vmwgfx: NULL pointer dereference in vmw_cmd_dx_define_query (CVE-2022-38096)

  - hw: Intel: Gather Data Sampling (GDS) side channel vulnerability (CVE-2022-40982)

  - kernel: use-after-free in smb2_is_status_io_timeout() (CVE-2023-1192)

  - kernel: bpf: Incorrect verifier pruning leads to unsafe code paths being incorrectly marked as safe     (CVE-2023-2163)

  - kernel: NULL pointer dereference in can_rcv_filter (CVE-2023-2166)

  - kernel: Slab-out-of-bound read in compare_netdev_and_ip (CVE-2023-2176)

  - kernel: out-of-bounds access in relay_file_read (CVE-2023-3268)

  - kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in     batch requests (CVE-2023-3390)

  - kernel: net/sched: cls_u32 component reference counter leak if tcf_change_indev() fails (CVE-2023-3609)

  - kernel: vmxnet3: NULL pointer dereference in vmxnet3_rq_cleanup() (CVE-2023-4459)

  - kernel: use after free in unix_stream_sendpage (CVE-2023-4622)

  - kernel: A heap out-of-bounds write when function perf_read_group is called and sibling_list is smaller     than its child's sibling_list (CVE-2023-5717)

  - kernel: GSM multiplexing race condition leads to privilege escalation (CVE-2023-6546)

  - kernel: use-after-free in IPv4 IGMP (CVE-2023-6932)

  - kernel: refcount leak in ctnetlink_create_conntrack() (CVE-2023-7192)

  - kernel: fbcon: out-of-sync arrays in fbcon_mode_deleted due to wrong con2fb_map assignment     (CVE-2023-38409)

  - kernel: use-after-free in l2cap_sock_release in net/bluetooth/l2cap_sock.c (CVE-2023-40283)

  - kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination     (CVE-2024-0646)

  - kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier (CVE-2024-26602)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1306 advisory.

  - kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion (CVE-2022-0480)

  - kernel: nfp: use-after-free in area_cache_get() (CVE-2022-3545)

  - kernel: vmwgfx: NULL pointer dereference in vmw_cmd_dx_define_query (CVE-2022-38096)

  - hw: Intel: Gather Data Sampling (GDS) side channel vulnerability (CVE-2022-40982)

  - kernel: use-after-free in smb2_is_status_io_timeout() (CVE-2023-1192)

  - kernel: bpf: Incorrect verifier pruning leads to unsafe code paths being incorrectly marked as safe     (CVE-2023-2163)

  - kernel: NULL pointer dereference in can_rcv_filter (CVE-2023-2166)

  - kernel: Slab-out-of-bound read in compare_netdev_and_ip (CVE-2023-2176)

  - kernel: out-of-bounds access in relay_file_read (CVE-2023-3268)

  - kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in     batch requests (CVE-2023-3390)

  - kernel: net/sched: cls_u32 component reference counter leak if tcf_change_indev() fails (CVE-2023-3609)

  - kernel: vmxnet3: NULL pointer dereference in vmxnet3_rq_cleanup() (CVE-2023-4459)

  - kernel: use after free in unix_stream_sendpage (CVE-2023-4622)

  - kernel: A heap out-of-bounds write when function perf_read_group is called and sibling_list is smaller     than its child's sibling_list (CVE-2023-5717)

  - kernel: GSM multiplexing race condition leads to privilege escalation (CVE-2023-6546)

  - kernel: use-after-free in IPv4 IGMP (CVE-2023-6932)

  - kernel: refcount leak in ctnetlink_create_conntrack() (CVE-2023-7192)

  - kernel: fbcon: out-of-sync arrays in fbcon_mode_deleted due to wrong con2fb_map assignment     (CVE-2023-38409)

  - kernel: use-after-free in l2cap_sock_release in net/bluetooth/l2cap_sock.c (CVE-2023-40283)

  - kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination     (CVE-2024-0646)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
195652	RHEL 7 : kernel (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/13/2024	critical
192008	RHEL 9 : kernel (RHSA-2024:1304)	Nessus	Red Hat Local Security Checks	3/13/2024	4/29/2024	medium
192009	RHEL 9 : kernel-rt (RHSA-2024:1303)	Nessus	Red Hat Local Security Checks	3/13/2024	4/28/2024	medium
194794	RHEL 9 : kernel (RHSA-2024:2394)	Nessus	Red Hat Local Security Checks	4/30/2024	5/1/2024	critical
191901	RHEL 9 : kernel (RHSA-2024:1250)	Nessus	Red Hat Local Security Checks	3/12/2024	4/28/2024	high
192035	RHEL 9 : kernel-rt (RHSA-2024:1306)	Nessus	Red Hat Local Security Checks	3/13/2024	4/28/2024	high
195036	Oracle Linux 9 : kernel (ELSA-2024-2394)	Nessus	Oracle Linux Local Security Checks	5/6/2024	5/7/2024	critical

Detections

Analytics

Plugins Search

critical

medium

medium

critical

high

high

critical